PRIVACY POLICY

Last updated June 14, 2026

Thank you for choosing to be a part of our community at My Right Gift ("MRG," "we," "us," or "our"). We are committed to protecting your personally identifiable information ("Personal Information" or "Personal Data") and your right to privacy. If you have questions or concerns about this Privacy Policy ("Policy"), please contact us at support@myrightgift.com.

For the purpose of the GDPR and UK GDPR, MRG is your data controller, operating from Santa Clarita, CA, United States.

This Policy applies to all information we collect from our Users through www.myrightgift.com, our mobile application, and any related services, sales, marketing, or events (collectively, "Sites").

WHAT INFORMATION DO WE COLLECT?
HOW DO WE USE YOUR INFORMATION?
WILL YOUR INFORMATION BE SHARED WITH ANYONE?
AFFILIATE PROGRAMS & REFERRAL DATA
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
HOW DO WE HANDLE YOUR SOCIAL LOGINS?
WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
HOW LONG DO WE KEEP YOUR INFORMATION?
HOW DO WE KEEP YOUR INFORMATION SAFE?
DATA BREACH NOTIFICATION
WHAT ARE YOUR PRIVACY RIGHTS?
LEGAL BASIS FOR PROCESSING PERSONAL DATA (GDPR)
CALIFORNIA RESIDENTS — CCPA/CPRA RIGHTS
OTHER US STATE PRIVACY RIGHTS
DO NOT TRACK
CHILDREN'S PRIVACY
ACCESSIBILITY
UPDATES TO THIS POLICY
HOW TO CONTACT US

1. WHAT INFORMATION DO WE COLLECT?

1.1 Personal Information You Provide

We collect Personal Information you voluntarily provide when registering, donating, creating wishes, posting comments, or contacting us. This includes:

Name and Contact Data: first and last name, date of birth, email address, and location.
Credentials: passwords and similar security information for authentication.
Payment Data: PayPal account identifiers. All payment processing is handled by PayPal; we do not store card numbers or bank details.
Interest Data: an optional free-text field you may complete during registration or by editing your profile, describing the types of gifts or products you are interested in. This field is entirely optional. If provided, it is used solely to personalise Wish Ideas recommendations and Discovery content shown to you on the Site. It is not used for advertising, not shared with third parties for marketing, and not used for any other purpose. You may update or delete your interest data at any time from your profile settings.
Social Media Login Data: if you register using Google or another provider, we collect profile information as described in Section 6.

1.2 Information Collected Automatically

When you visit the Site, we automatically collect certain non-personally-identifying information, including IP address, browser type and version, operating system, device name, language preferences, referring URLs, pages visited, time and date of visits, and approximate geographic location. This information is used to maintain security, analyze usage, and improve the Site.

1.3 Information from Other Sources

We may receive information about you from public databases, marketing partners, social media platforms (such as Google), and other third parties, including social media profile information and marketing leads.

2. HOW DO WE USE YOUR INFORMATION?

We use your Personal Information for the following purposes:

Account creation and login (Consent / Contract)
Fulfilling and managing donations and wishes (Contract)
Sending administrative communications — policy updates, service notices (Contract / Legal Obligation)
Sending marketing and promotional communications, if opted in (Consent)
Personalising Wish Ideas recommendations and Discovery content based on your optional Interests input (Consent — you may withdraw at any time by clearing your interest data in your profile settings)
Delivering targeted advertising and analyzing Site performance (Legitimate Interest)
Administering contests or promotions (Legitimate Interest)
Protecting the Site against fraud, abuse, and unauthorized access (Legitimate Interest / Legal Obligation)
Enabling user-to-user communications (Consent)
Enforcing our Terms of Use and other policies (Legitimate Interest / Legal Obligation)
Responding to legal requests and complying with applicable law (Legal Obligation)
Internal analytics and usage trend analysis (Legitimate Interest)

3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

We only share your information in the following circumstances:

Compliance with Laws: when required by law, court order, subpoena, or government authority.
Vital Interests and Legal Rights: to investigate fraud, protect safety, or defend against legal claims.
Service Providers: we share data with vetted vendors who perform services on our behalf (payment processing, analytics, email delivery, hosting). These parties are bound by data processing agreements.
Business Transfers: in connection with a merger, acquisition, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
With Your Consent: for any other purpose with your explicit consent.
Other Users: public content you post (wishes, comments) may be visible to all Site users.

We do not sell, rent, or trade your Personal Information to third parties for their own marketing purposes. Your Interests input is never shared with third parties.

4. AFFILIATE PROGRAMS & REFERRAL DATA

MRG participates in affiliate programs including the Amazon Associates Program and the Etsy Affiliate Program (via Awin), and may join additional affiliate programs in the future.

4.1 What Data Is Shared with Affiliate Partners

When you click an affiliate link on the Site, a tracking cookie or referral identifier is passed to the affiliate partner. This referral data may include a unique click or session identifier, the time and date of the click, the referring page URL on our Site, and your browser and device type. MRG does not receive your name, payment details, or personal purchase information from affiliate partners. Your Interests input is never passed to affiliate partners.

4.2 When Affiliate Tracking Applies

Affiliate tracking applies to Admin Wishes on the Wish Ideas page, wishes copied from Wish Ideas to a user's personal wish list, and any affiliate-tagged wish appearing in Discovery. User-created wishes not copied from Wish Ideas do not carry affiliate tracking links.

4.3 Cookie Consent & Affiliate Tracking

Affiliate tracking cookies are non-essential and will only be set if you have consented to targeting/advertising cookies via our cookie consent banner. See our Cookie Policy at https://www.myrightgift.com/cookie-policy for full details.

4.4 Third-Party Affiliate Privacy Policies

Amazon: https://www.amazon.com/privacy
Etsy / Awin: https://www.awin.com/gb/privacy

As an Amazon Associate, MRG earns from qualifying purchases. As an Etsy affiliate, MRG earns from qualifying purchases made through Etsy affiliate links.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. We use cookies and similar tracking technologies to operate the Site, analyze usage, and deliver relevant content. For detailed information, please see our Cookie Policy at https://www.myrightgift.com/cookie-policy.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you register or log in using a third-party social media account (such as Google), we receive certain profile information from that provider. MRG's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. WHAT IS OUR STANCE ON THIRD-PARTY SITES?

The Site may contain links to third-party websites not affiliated with us, including affiliate store links. We are not responsible for the privacy or security practices of such sites. Any data you submit to third-party sites is not covered by this Policy.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law. Account data is retained for the duration of your account with us. Your Interests input is retained only while it exists in your profile — you may delete it at any time. Upon account termination, all data is deleted or anonymized within a reasonable period, subject to legal retention requirements.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate technical and organizational security measures to protect your Personal Information, including encryption of sensitive identifiers and secure server infrastructure. However, no internet transmission is 100% secure. Please access our Services only in a secure environment and keep your account credentials confidential.

10. DATA BREACH NOTIFICATION

In the event of a data breach that affects your Personal Information, MRG will notify affected users and, where required by applicable law, the relevant supervisory authorities, in accordance with the following timeframes:

GDPR / UK GDPR (EU/EEA/UK users): We will notify the relevant data protection supervisory authority within 72 hours of becoming aware of a breach that is likely to result in a risk to your rights and freedoms. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
CCPA/CPRA (California users): We will notify affected California residents in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and with any measures necessary to determine the scope of the breach and restore the integrity of our systems.
Other US states: We will comply with applicable state data breach notification laws in your state of residence.

Breach notifications will be sent to the email address associated with your account. We recommend keeping your account email address current. The notification will describe the nature of the breach, the categories of Personal Information affected, the likely consequences, and the measures we have taken or propose to take to address the breach.

11. WHAT ARE YOUR PRIVACY RIGHTS?

11.1 EU / EEA / UK Residents (GDPR / UK GDPR)

You have the right to: access your data; rectify inaccurate data; erasure ('right to be forgotten'); restrict processing; data portability; object to processing; withdraw consent at any time (including consent to personalisation based on your Interests input); and not be subject to solely automated decision-making. To exercise any of these rights, contact us at support@myrightgift.com. You may also lodge a complaint with your local supervisory authority.

11.2 General Account Rights (All Users)

You may review or update your account information, including your Interests input, by logging in to your account settings or by contacting us. Upon a request to terminate your account, we will deactivate or delete your account from our active databases, subject to legal retention requirements.

11.3 Opting Out of Marketing Emails

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or contacting us. We will continue to send service-related communications necessary for account administration.

12. LEGAL BASIS FOR PROCESSING PERSONAL DATA (GDPR)

Our legal bases for processing Personal Data are:

Contract: performing our agreement with you (e.g., processing donations, managing your account).
Consent: marketing communications, social login, non-essential cookies, and personalisation based on your optional Interests input. You may withdraw consent for personalisation at any time by clearing your Interests field in your profile settings.
Legitimate Interests: fraud prevention, site security, analytics, and affiliate program operation.
Legal Obligation: responding to legal requests, tax obligations, and data breach reporting.
Vital Interests: in rare cases, to protect the vital interests of you or another person.

International Data Transfers: Your Personal Data may be transferred to and processed in the United States. Where we transfer data from the EU/EEA/UK, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

13. CALIFORNIA RESIDENTS — CCPA/CPRA RIGHTS

California residents have the following rights under the CCPA as amended by the CPRA:

Right to Know: request disclosure of Personal Information collected, sources, purposes, and third parties it is shared with.
Right to Delete: request deletion of your Personal Information, including your Interests input.
Right to Correct: request correction of inaccurate Personal Information.
Right to Opt Out of Sale/Sharing: we do not sell your Personal Information. Affiliate referral data sharing is a service provider relationship, not a sale.
Right to Limit Sensitive Personal Information: you have the right to limit our use of sensitive personal information to what is necessary to provide the Services.
Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a verifiable consumer request, contact us at support@myrightgift.com. We will respond within 45 days.

Shine the Light Law (Cal. Civil Code § 1798.83): California residents may once per year request information about Personal Information we have disclosed to third parties for direct marketing purposes.

Minor Eraser Law: California residents under 18 with a registered account may request removal of content they publicly posted on the Site.

14. OTHER US STATE PRIVACY RIGHTS

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with enacted privacy laws may have additional rights including rights to access, delete, correct, and opt out of certain processing. Contact us at support@myrightgift.com to exercise any such rights.

15. DO NOT TRACK

Because there is no recognized industry standard for Do Not Track (DNT) signals, we do not currently respond to them. You can control cookie-based tracking through our Cookie Policy and your browser settings.

16. CHILDREN'S PRIVACY

We do not knowingly collect Personal Information from children under 13 (or under 16 in the EU/EEA/UK) without verifiable parental consent. Users aged 13–17 may use the Site only with the express permission of a parent or legal guardian, who must agree to these Terms and our Privacy Policy on the minor's behalf.

We rely on users' own representations to establish age eligibility and cannot independently verify user ages. If you are a parent or guardian and believe your child has submitted Personal Information to us without your consent, please contact us at support@myrightgift.com and we will promptly delete that information and terminate the account where appropriate.

Financial accounts: Minors cannot independently hold a PayPal account. Any minor receiving donations through the Site must have a parent or legal guardian's PayPal account connected on their behalf. The parent or guardian is responsible for all funds received and associated tax obligations.

17. ACCESSIBILITY

MRG is committed to making our Site accessible to all users, including those with disabilities. If you experience any difficulty accessing information or exercising your privacy rights due to accessibility barriers, please contact us at support@myrightgift.com with "Accessibility" in the subject line and we will provide assistance in an alternative format.

18. UPDATES TO THIS POLICY

We may update this Policy from time to time. The updated version will be indicated by a new "Last Updated" date. For material changes, we will notify you by posting a prominent notice on the Site or by email.

19. HOW TO CONTACT US

If you have questions or comments about this Policy, please contact us at:

My Right Gift 18723 Via Princessa #1085 Santa Clarita, CA 91387 support@myrightgift.com

For EU/EEA/UK users, MRG is your data controller. You may also contact your local data protection supervisory authority if you have unresolved concerns.